← All advisories

High severity7.5NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2018-20989

CVE-2018-20989

Description

An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
untrustedcrates.io	< 0.6.2	0.6.2

Affected products

3

Untrusted Project/Untrusted
cpe:2.3:a:untrusted_project:untrusted:*:*:*:*:*:*:*:*
Range: <0.6.2
Rust/untrusted cratedescription
ghsa-coords
pkg:cargo/untrusted
Range: < 0.6.2

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-wq8f-46ww-6c2hghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20989ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2018-0001.htmlnvdThird Party AdvisoryWEB
github.com/briansmith/untrusted/pull/20ghsaWEB

News mentions

0

No linked articles in our index yet.